CVE-2002-0564

Published: Jul 3, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to reference an alternate DAD that already has valid credentials.

Affected (9)

Products: Oracle: Application Server, Application Server Web Cache, Oracle8i, Oracle9i

Oracle

4 products

Application Server

Application Server Web Cache

Oracle8i

Oracle9i

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Oracle Application Server	Version 1.0.2
Oracle Application Server Web Cache	Version 2.0.0.0
Oracle Application Server Web Cache	Version 2.0.0.1
Oracle Application Server Web Cache	Version 2.0.0.2
Oracle Application Server Web Cache	Version 2.0.0.3
Oracle Oracle8i	Version 8.1.7.1
Oracle Oracle8i	Version 8.1.7
Oracle Oracle9i	Version 9.0.1
Oracle Oracle9i	Version 9.0